2585a300f54ffaae3c5c439a834ae906a3fee24641eae96c1da6b8ba51a48b84 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-01-2024 05:57

Sharing

Report Analysis Logs

General

Target

76922572bcfa0f835de4c54678719893.pdf
Size

42KB
MD5

76922572bcfa0f835de4c54678719893
SHA1

a615c1af3b8fb4ea66bcd2a959a960af7f7f96a9
SHA256

2585a300f54ffaae3c5c439a834ae906a3fee24641eae96c1da6b8ba51a48b84
SHA512

ec133193a4d0553cde09d98f8fe1aa383a39f45e8684940118518908f02b9acd12cedbfa3fe3621de478adee6bdf96bb3ce198eeb7e54f05c1b4dc491b41340a
SSDEEP

768:4M+XSzS1ymgPk/GCj3SKnnLURsy0b32UhfIfWdyWRRG:s0kRSWLURUb32TfWd3RG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2536	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\76922572bcfa0f835de4c54678719893.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
654128bf7a180a851afc0463b6e859e6

SHA1
62525ee220d40c4c37330b38eb485307b1324940

SHA256
8f356b05e23e6fc3123f6a39294cc9d325d62807204d52e16978cfc03a90fffa

SHA512
6e0c5c9aa5482b1555d3ee93b5397922c368d0f290bb890d4973a8594c30908d3211bda53be079202efc1d5aa3fe6b359365a2706b907b72aec4de0a7e3841f2

Download Submit